$ rpki-client -vvf rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft File: NMONZkm5DWjTzmwJ8euU0-V5_J0.mft (raw, json) Hash identifier: yFOHgP+CPoNlZzjgK8lPkGbONimoKABptmLiXtnki9g= Subject key identifier: 3B:11:55:75:89:66:21:B4:C0:B2:A7:D2:CE:45:2D:51:C4:94:43:AA Authority key identifier: 34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D Certificate issuer: /CN=A9192491/serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D Certificate serial: 0E31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft Manifest number: 0E28 Signing time: Fri 22 Aug 2025 17:54:37 +0000 Manifest this update: Fri 22 Aug 2025 17:54:37 +0000 Manifest next update: Fri 29 Aug 2025 17:54:37 +0000 Files and hashes: 1: NMONZkm5DWjTzmwJ8euU0-V5_J0.crl (hash: w6yzLvCSO3u/M5J1JMYnqwPTrkK8Q/VWTKmdNg1KMFU=) 2: 54AE11C6AD3211E9B3BC7385C4F9AE02.roa (hash: a2Zz+SuX3DCfdSuIf8QT+Sa+cHmZnSxsIqO80zeBe3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3633 (0xe31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192491, serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D Validity Not Before: Aug 22 17:54:37 2025 GMT Not After : Aug 29 17:54:37 2025 GMT Subject: CN=68a8aedd-9ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:ce:83:2b:1d:60:d8:6e:3f:06:e4:a4:12: 3c:92:0b:f5:4d:82:64:21:d9:2d:64:79:75:1d:49: 45:4b:7b:cf:2f:6d:d2:01:c2:b3:e6:81:ff:35:7c: 94:90:09:0b:60:23:e3:5e:73:d1:8c:e5:ae:7e:62: 16:51:9c:31:cb:db:e9:fb:f2:1d:b5:55:fb:50:d0: 7b:61:af:ca:3c:bf:c7:09:69:c3:bc:16:6e:e1:7f: 47:bf:9e:b5:f0:63:29:37:61:12:7a:16:64:c9:ff: 38:46:68:f1:51:03:a0:f4:de:c7:50:70:d6:47:d9: f0:8f:22:01:a2:ba:2e:1d:58:40:f6:ba:70:2f:18: 6e:ce:65:2b:e7:7d:70:16:48:77:5b:ec:2a:8d:1c: 4e:a2:c4:7d:9e:24:5b:bc:d4:19:2b:e5:cc:99:01: 81:bf:a5:46:b1:18:3b:15:ca:7d:49:b7:e4:55:38: 56:65:9f:cd:38:4d:d3:c0:0c:2d:c5:d3:ae:80:91: 74:a3:34:fb:7f:1e:34:1d:e5:c4:e5:3b:d4:32:bc: 1b:65:8f:10:ef:18:39:e5:69:63:1f:e3:9f:22:cb: 05:43:61:a7:f0:75:6e:7f:64:0a:1a:25:4e:39:ea: b1:13:b3:72:07:9f:6d:95:fb:3f:81:c9:ad:27:df: 7e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:11:55:75:89:66:21:B4:C0:B2:A7:D2:CE:45:2D:51:C4:94:43:AA X509v3 Authority Key Identifier: keyid:34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:2a:7a:9b:21:2d:1b:64:aa:85:3d:e8:63:6d:ae:18:76:ad: c8:b7:bd:0f:54:55:8a:f1:b2:d2:28:f0:de:8c:e1:7b:07:43: 69:39:81:1a:48:e5:cf:92:b2:f6:09:35:54:03:59:ae:c5:9c: 3e:51:31:d1:46:21:f5:cd:ab:e9:f2:95:3f:aa:06:5b:08:b9: c8:31:c5:6e:22:77:4e:b3:1b:e2:ea:63:6b:64:8b:17:1d:9c: 66:b2:cf:4c:97:f8:a8:d5:e1:56:da:71:7b:4d:7e:86:b9:8a: 84:8f:b6:2c:8d:3a:50:48:10:95:d4:fd:75:94:42:5a:c3:6b: f1:2c:7a:43:ed:f5:a7:df:5b:2d:cd:e2:7d:b6:34:c9:95:1b: 23:1c:fe:fd:90:56:89:2e:93:b0:d6:fe:33:42:0c:f0:97:65: 06:19:a7:78:cf:46:71:ae:1e:24:bf:30:ca:3a:45:66:6f:12: f4:7d:fb:b5:5e:8a:71:6b:66:f9:a9:e2:96:93:9f:b6:4e:4e: e6:6e:19:d4:4b:96:14:fe:36:db:1f:c5:ce:13:7f:a0:24:bf: 55:97:b2:fa:99:bf:ab:2a:b4:bb:ee:92:13:45:06:76:85:3e: 65:65:a2:ec:81:c6:05:62:3e:49:c8:59:27:f0:06:4c:20:f0: 78:6f:b0:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI0OTExMTAvBgNVBAUTKDM0QzM4RDY2NDlCOTBENjhEM0NFNkMwOUYxRUI5NEQz RTU3OUZDOUQwHhcNMjUwODIyMTc1NDM3WhcNMjUwODI5MTc1NDM3WjAYMRYwFAYD VQQDEw02OGE4YWVkZC05ZWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwHOgysdYNhuPwbkpBI8kgv1TYJkIdktZHl1HUlFS3vPL23SAcKz5oH/NXyU kAkLYCPjXnPRjOWufmIWUZwxy9vp+/IdtVX7UNB7Ya/KPL/HCWnDvBZu4X9Hv561 8GMpN2ESehZkyf84RmjxUQOg9N7HUHDWR9nwjyIBorouHVhA9rpwLxhuzmUr531w Fkh3W+wqjRxOosR9niRbvNQZK+XMmQGBv6VGsRg7Fcp9SbfkVThWZZ/NOE3TwAwt xdOugJF0ozT7fx40HeXE5TvUMrwbZY8Q7xg55WljH+OfIssFQ2Gn8HVuf2QKGiVO OeqxE7NyB59tlfs/gcmtJ99+0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsRVXWJ ZiG0wLKn0s5FLVHElEOqMB8GA1UdIwQYMBaAFDTDjWZJuQ1o085sCfHrlNPlefyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjQ5MS9EMDYyNkQ5MkFE MkYxMUU5OEZGOEQ3N0ZDNEY5QUUwMi9OTU9OWmttNURXalR6bXdKOGV1VTAtVjVf SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05NT05aa201RFdqVHptd0o4ZXVVMC1WNV9KMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjQ5MS9EMDYyNkQ5MkFEMkYxMUU5OEZGOEQ3N0ZDNEY5QUUwMi9OTU9OWmttNURX alR6bXdKOGV1VTAtVjVfSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUKnqbIS0bZKqFPehjba4Ydq3It70PVFWK8bLSKPDejOF7B0NpOYEa SOXPkrL2CTVUA1muxZw+UTHRRiH1zavp8pU/qgZbCLnIMcVuIndOsxvi6mNrZIsX HZxmss9Ml/io1eFW2nF7TX6GuYqEj7YsjTpQSBCV1P11lEJaw2vxLHpD7fWn31st zeJ9tjTJlRsjHP79kFaJLpOw1v4zQgzwl2UGGad4z0Zxrh4kvzDKOkVmbxL0ffu1 Xopxa2b5qeKWk5+2Tk7mbhnUS5YU/jbbH8XOE3+gJL9Vl7L6mb+rKrS77pITRQZ2 hT5lZaLsgcYFYj5JyFkn8AZMIPB4b7BP -----END CERTIFICATE-----Generated at Sun Aug 24 00:01:47 2025 by rpki-client